An exploit in which an attacker inserts malicious SQL code into a database’s queries to manipulate data or gain access to resources.